Got Metasploit?

[Dan_Roddy]

If IPS detects a metasploit component inside your network, if you're like me, this gets real and immediate attention.  However, if you are backing up a machine with a Checkpoint console installed, IPS will trigger on this file inside the Smart Console directory:

COMMGR_Metasploit_help.

Take a deep breath, all is well.

Best regards,

Dan

[PhoneBoy]

Was it on a file transfer of a backup or something?
That sounds like a false positive we should look at.

[Dan_Roddy]

It was detected twice, first as a backup crossed a network segment and second as the backup file was transferred to a DR site.